Skip to content

Glossary: Attacks and Indicators

SQL injection

Injection into a database command. A quote ends the app's text and attacker SQL follows, as in `x' UNION SELECT name, password FROM users--`.

Where the book teaches it

Related terms

injectionparameterized queryUNION SELECT